ghostrail 0.15.2 → 0.16.0

package/dist/dashboard/server.js

@@ -6,10 +6,23 @@ import { resolveStateDir } from "../factory/state.js";
 import { repoStateDir } from "../global/state-dir.js";
 import { FileStore } from "../store/file-store.js";
 import { DASHBOARD_PAGE_HTML } from "./page.js";
-import { isCrossOriginWrite, parseDashboardRoute, parseWatchUpdate } from "./routes.js";
-/** The store dir inside a ghostrail. */
+import { isCrossOriginWrite, parseArtifactHash, parseDashboardRoute, parseDetailQuery, parseWatchUpdate, } from "./routes.js";
 /** How many runs to show per ghostrail. Enough to see recent activity, not a log. */
 const RUNS_PER_GHOSTRAIL = 5;
+/**
+ * One ghostrail's store: the dep when it was supplied, otherwise a file store
+ * over the directory `stateDir` resolved.
+ *
+ * Every read goes through here, the listing and both detail routes, so nothing
+ * in this server can disagree with anything else about where a ghostrail's
+ * history lives. That agreement is the whole point: TJ-1639 was two places
+ * deriving one directory and reaching different answers.
+ */
+async function storeFor(deps, entry) {
+    if (deps.store !== undefined)
+        return deps.store(entry);
+    return new FileStore(await deps.stateDir(entry));
+}
 function sendJson(res, status, data) {
     res.writeHead(status, { "content-type": "application/json" });
     res.end(JSON.stringify(data));
@@ -38,13 +51,7 @@ export async function collectViews(deps, entries) {
         let runs = [];
         if (health === "ok") {
             try {
-                const rows = await new FileStore(await deps.stateDir(entry)).listRuns({});
-                runs = rows.slice(0, RUNS_PER_GHOSTRAIL).map((row) => ({
-                    runId: row.runId,
-                    ...(row.itemId === undefined ? {} : { itemId: row.itemId }),
-                    ...(row.state === undefined ? {} : { state: row.state }),
-                    ...(row.title === undefined ? {} : { title: row.title }),
-                }));
+                runs = (await (await storeFor(deps, entry)).listRuns({})).slice(0, RUNS_PER_GHOSTRAIL);
             }
             catch {
                 runs = [];
@@ -55,8 +62,9 @@ export async function collectViews(deps, entries) {
     return views;
 }
 /**
- * The dashboard's HTTP server: one page, one listing, and one write route that
- * sets a ghostrail's `watch` flag and does nothing else.
+ * The dashboard's HTTP server: one page, one listing, two read routes for a
+ * single run's live PR status and its artifacts, and one write route that sets
+ * a ghostrail's `watch` flag and does nothing else.
  *
  * It never starts or stops anything. `start` and the service units act on the
  * flag, which keeps process control off an HTTP surface: the worst a
@@ -94,6 +102,62 @@ export function createDashboardServer(deps, options = {}) {
             if (route.kind === "ghostrails") {
                 return sendJson(res, 200, { ghostrails: await collectViews(deps, entries) });
             }
+            if (route.kind === "prStatus" || route.kind === "artifact") {
+                // Both are reads. The write route states its verb and these did not,
+                // which left a form POST able to reach a store read: harmless on its
+                // own, since a cross-origin page cannot read the response either way,
+                // but a route that accepts verbs it does not mean is the kind of thing
+                // a later guard gets reasoned about wrongly.
+                if (req.method !== "GET")
+                    return sendJson(res, 405, { error: "use GET" });
+                const key = route.kind === "prStatus" ? "run" : "hash";
+                const query = parseDetailQuery(url.searchParams, key);
+                if (query === undefined) {
+                    return sendJson(res, 400, { error: `expected ?path=<ghostrail path>&${key}=<id>` });
+                }
+                // Same rule the write route holds to: a ghostrail must already be
+                // registered. Reading a store under a path supplied by the request
+                // would let a caller name any directory on the machine.
+                const entry = entries.find((e) => e.path === query.path);
+                if (entry === undefined) {
+                    return sendJson(res, 404, { error: "no registered ghostrail at that path" });
+                }
+                if (route.kind === "artifact") {
+                    // A hash that is not a digest is a 404, not a 400: the request is
+                    // well formed, it just names something no store could hold (TJ-1641).
+                    const hash = parseArtifactHash(url.searchParams);
+                    if (hash === undefined)
+                        return sendJson(res, 404, { error: "not found" });
+                    const blob = await (await storeFor(deps, entry)).getArtifact(hash);
+                    if (blob === undefined)
+                        return sendJson(res, 404, { error: "not found" });
+                    res.writeHead(200, { "content-type": "application/octet-stream" });
+                    return res.end(blob);
+                }
+                const row = await (await storeFor(deps, entry)).getRun(query.value);
+                if (row === undefined)
+                    return sendJson(res, 404, { error: "not found" });
+                if (row.prNumber === undefined) {
+                    return sendJson(res, 404, { error: "no pull request for this run" });
+                }
+                if (deps.prStatus === undefined)
+                    return sendJson(res, 200, { available: false });
+                try {
+                    return sendJson(res, 200, {
+                        available: true,
+                        ...(await deps.prStatus(entry, row.prNumber)),
+                    });
+                }
+                catch (error) {
+                    // Never a 500. A route whose whole job is "tell me what is known"
+                    // answers "not known" when the lookup fails, and the page renders
+                    // that as a muted line rather than an alarm.
+                    return sendJson(res, 200, {
+                        available: false,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+            }
             if (route.kind === "watch") {
                 if (req.method !== "POST")
                     return sendJson(res, 405, { error: "use POST" });

package/dist/dashboard/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/dashboard/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,YAAY,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA6CxF,wCAAwC;AAExC,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,QAAQ,CAAC,GAA0B,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI;IACnE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC1E,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACnB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAmB,EACnB,OAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,kEAAkE;QAClE,yEAAyE;QACzE,IAAI,IAAI,GAA0B,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;gBAC1E,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACrD,KAAK,EAAE,GAAG,CAAC,KAAK;oBAChB,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;oBAC3D,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;oBACxD,GAAG,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;iBACzD,CAAC,CAAC,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmB,EAAE,UAA4B,EAAE;IACvF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE5C,0EAA0E;IAC1E,2CAA2C;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC1F,IAAI,SAAS,KAAK,KAAK;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEhD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,OAAO,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5E,oEAAoE;gBACpE,sEAAsE;gBACtE,sDAAsD;gBACtD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,uEAAuE;gBACvE,qEAAqE;gBACrE,gCAAgC;gBAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3D,CAAC;gBACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC/B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAC7B,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/dashboard/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,YAAY,EAAE,MAAM,WAAW,CAAC;AAC3E,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,OAAO,MAAM,cAAc,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AAGtD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,mBAAmB,EACnB,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,aAAa,CAAC;AAwErB,qFAAqF;AACrF,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B;;;;;;;;GAQG;AACH,KAAK,UAAU,QAAQ,CAAC,IAAmB,EAAE,KAAgB;IAC3D,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvD,OAAO,IAAI,SAAS,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IAClE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC;AAED,gFAAgF;AAChF,KAAK,UAAU,QAAQ,CAAC,GAA0B,EAAE,KAAK,GAAG,EAAE,GAAG,IAAI;IACnE,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAe,CAAC,CAAC;QAC1E,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC;QACnB,IAAI,IAAI,GAAG,KAAK;YAAE,MAAM;QACxB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAChD,CAAC;AAED,wDAAwD;AACxD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,IAAmB,EACnB,OAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC7C,kEAAkE;QAClE,yEAAyE;QACzE,IAAI,IAAI,GAA0B,EAAE,CAAC;QACrC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,kBAAkB,CAAC,CAAC;YACzF,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,GAAG,EAAE,CAAC;YACZ,CAAC;QACH,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAmB,EAAE,UAA4B,EAAE;IACvF,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;IACzC,2EAA2E;IAC3E,wEAAwE;IACxE,uEAAuE;IACvE,oEAAoE;IACpE,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAE5C,0EAA0E;IAC1E,2CAA2C;IAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,YAAY,KAAK,IAAI,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CACb,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,OAAO,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/B,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;YAExD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;gBACxB,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBAC1F,IAAI,SAAS,KAAK,KAAK;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAC;YAChF,CAAC;YAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAEhD,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBAC1B,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;gBACnE,OAAO,GAAG,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;YACtC,CAAC;YAED,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;YAC1C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,6CAA6C,EAAE,CAAC,CAAC;YACtF,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;YAC/E,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC3D,qEAAqE;gBACrE,qEAAqE;gBACrE,sEAAsE;gBACtE,uEAAuE;gBACvE,6CAA6C;gBAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;gBAC1E,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;gBACvD,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;gBACtD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,GAAG,OAAO,EAAE,CAAC,CAAC;gBACtF,CAAC;gBACD,kEAAkE;gBAClE,mEAAmE;gBACnE,wDAAwD;gBACxD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;oBACxB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBAED,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBAC9B,kEAAkE;oBAClE,sEAAsE;oBACtE,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;oBACjD,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC1E,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;oBACnE,IAAI,IAAI,KAAK,SAAS;wBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;oBAC1E,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,CAAC,CAAC;oBACnE,OAAO,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBACvB,CAAC;gBAED,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBACpE,IAAI,GAAG,KAAK,SAAS;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;gBACzE,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;oBAC/B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;gBACvE,CAAC;gBACD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;gBACjF,IAAI,CAAC;oBACH,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,SAAS,EAAE,IAAI;wBACf,GAAG,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;qBAC9C,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,kEAAkE;oBAClE,kEAAkE;oBAClE,6CAA6C;oBAC7C,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;wBACxB,SAAS,EAAE,KAAK;wBAChB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;gBACL,CAAC;YACH,CAAC;YAED,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC3B,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;oBAAE,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5E,oEAAoE;gBACpE,sEAAsE;gBACtE,sDAAsD;gBACtD,IAAI,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;oBACpC,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBAC1E,CAAC;gBACD,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;gBACrD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBACzB,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC,CAAC;gBAClF,CAAC;gBACD,uEAAuE;gBACvE,qEAAqE;gBACrE,gCAAgC;gBAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAC;gBAC/E,CAAC;gBACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC7B,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3D,CAAC;gBACF,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;gBAC/B,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;YAC5E,CAAC;YAED,OAAO,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,KAAgB;IAC9C,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS;QAC7B,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC;QAC7B,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC"}

package/dist/doctor/checks.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Pure check functions: each takes already-gathered facts and returns a
+ * {@link DoctorCheck} (or one per item, for the checks that repeat per prompt).
+ * No I/O here — see probes.ts for that — so every rule is testable without a
+ * container, a tracker, or the network. Rules are documented in
+ * specs/doctor-command.spec.md.
+ */
+import type { ConfigError } from "../config/result.js";
+import type { BackendKind } from "../config/schema.js";
+import type { RunRow } from "../store/events.js";
+import type { DoctorCheck } from "./types.js";
+export declare function checkConfig(parsed: {
+    ok: true;
+} | {
+    ok: false;
+    errors: readonly ConfigError[];
+}): DoctorCheck;
+export type PromptField = "agent.prompt" | "respond.prompt" | "triage.prompt";
+export interface PromptFact {
+    field: PromptField;
+    path: string;
+    exists: boolean;
+    committed: boolean;
+}
+/** One check per configured prompt path: exists on disk, and is committed. */
+export declare function checkPrompt(fact: PromptFact): DoctorCheck;
+/**
+ * The `package.json` script name a gate command invokes, if it looks like a
+ * package-manager script invocation (`pnpm <script>`, `npm run <script>`,
+ * `yarn <script>`); undefined for anything else, including a package-manager
+ * builtin like `pnpm install`. Best-effort: a command this misses is simply not
+ * checked further, never reported as broken on a guess.
+ */
+export declare function scriptNameOf(command: string): string | undefined;
+/** Gate commands that name a `package.json` script the project does not have. */
+export declare function unresolvedGateCommands(commands: readonly string[], scripts: Record<string, unknown> | undefined): string[];
+export declare function checkGate(commands: readonly string[], scripts: Record<string, unknown> | undefined): DoctorCheck;
+export interface BackendFacts {
+    kind: BackendKind;
+    image?: string;
+    quick: boolean;
+    /** undefined only when `quick` skipped the probe. */
+    dockerAvailable?: boolean;
+    /** undefined when `quick` skipped, docker is unreachable, or no custom image is configured. */
+    imagePresent?: boolean;
+}
+export declare function checkBackend(facts: BackendFacts): DoctorCheck;
+export interface ClaudeProfileFacts {
+    present: boolean;
+    /** Skills requested via `--pin` at `claude-setup` time, not installed. */
+    missingPins: string[];
+}
+export declare function checkClaudeProfile(facts: ClaudeProfileFacts): DoctorCheck;
+export type CredentialShape = "unset" | "blank" | "set";
+/** Whether a raw env value is unset, present-but-blank, or a real value. Never returns the value. */
+export declare function classifyCredential(value: string | undefined): CredentialShape;
+export declare function checkClaudeAuthCredential(anthropicApiKey: string | undefined, oauthToken: string | undefined): DoctorCheck;
+export declare function checkLinearCredential(linearApiKey: string | undefined): DoctorCheck;
+export declare function checkGithubCredential(ghToken: string | undefined, githubToken: string | undefined): DoctorCheck;
+export type ClaudeProbeResult = {
+    kind: "skipped";
+} | {
+    kind: "ok";
+} | {
+    kind: "invalid-token";
+} | {
+    kind: "error";
+    message: string;
+} | {
+    kind: "not-run";
+};
+export declare function checkClaudeProbe(result: ClaudeProbeResult, backendKind: BackendKind): DoctorCheck;
+export type LinearProbeResult = {
+    kind: "skipped";
+} | {
+    kind: "ok";
+} | {
+    kind: "unauthorized";
+} | {
+    kind: "error";
+    message: string;
+} | {
+    kind: "not-run";
+};
+export declare function checkLinearProbe(result: LinearProbeResult): DoctorCheck;
+export declare function checkHistory(rows: readonly RunRow[]): DoctorCheck;
+//# sourceMappingURL=checks.d.ts.map

package/dist/doctor/checks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checks.d.ts","sourceRoot":"","sources":["../../src/doctor/checks.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9C,wBAAgB,WAAW,CACzB,MAAM,EAAE;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAA;CAAE,GACnE,WAAW,CAgBb;AAED,MAAM,MAAM,WAAW,GAAG,cAAc,GAAG,gBAAgB,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,WAAW,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,8EAA8E;AAC9E,wBAAgB,WAAW,CAAC,IAAI,EAAE,UAAU,GAAG,WAAW,CAsBzD;AA8BD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAchE;AAED,iFAAiF;AACjF,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC3C,MAAM,EAAE,CAQV;AAED,wBAAgB,SAAS,CACvB,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC3C,WAAW,CAuBb;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,WAAW,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,qDAAqD;IACrD,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+FAA+F;IAC/F,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,YAAY,GAAG,WAAW,CAqC7D;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,OAAO,CAAC;IACjB,0EAA0E;IAC1E,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,kBAAkB,GAAG,WAAW,CAyBzE;AAED,MAAM,MAAM,eAAe,GAAG,OAAO,GAAG,OAAO,GAAG,KAAK,CAAC;AAExD,qGAAqG;AACrG,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,eAAe,CAG7E;AAED,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B,WAAW,CAiDb;AAED,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAuBnF;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,WAAW,CAsCb;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,GACzB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,EAAE,WAAW,EAAE,WAAW,GAAG,WAAW,CAyCjG;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,GACnB;IAAE,IAAI,EAAE,IAAI,CAAA;CAAE,GACd;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,SAAS,CAAA;CAAE,CAAC;AAExB,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,iBAAiB,GAAG,WAAW,CA0BvE;AAID,wBAAgB,YAAY,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,WAAW,CAwBjE"}

package/dist/doctor/checks.js

@@ -0,0 +1,414 @@
+/**
+ * Pure check functions: each takes already-gathered facts and returns a
+ * {@link DoctorCheck} (or one per item, for the checks that repeat per prompt).
+ * No I/O here — see probes.ts for that — so every rule is testable without a
+ * container, a tracker, or the network. Rules are documented in
+ * specs/doctor-command.spec.md.
+ */
+import { DEFAULT_CONTAINER_IMAGE } from "../backend/docker.js";
+export function checkConfig(parsed) {
+    const id = "config";
+    const label = "config";
+    if (parsed.ok) {
+        return { id, label, status: "pass", detail: "ghostrail.toml parses" };
+    }
+    const detail = parsed.errors
+        .map((error) => `config error at ${error.path || "(root)"}: ${error.message}`)
+        .join("; ");
+    return {
+        id,
+        label,
+        status: "fail",
+        detail,
+        fix: `fix ${parsed.errors.length === 1 ? "the error" : "these errors"} in ghostrail.toml`,
+    };
+}
+/** One check per configured prompt path: exists on disk, and is committed. */
+export function checkPrompt(fact) {
+    const id = `prompt:${fact.field}`;
+    const label = `prompt (${fact.field})`;
+    if (!fact.exists) {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: `${fact.path} does not exist`,
+            fix: `create ${fact.path}`,
+        };
+    }
+    if (!fact.committed) {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: `${fact.path} exists but is not committed; a fresh clone or worktree will not have it`,
+            fix: `git add ${fact.path} && git commit`,
+        };
+    }
+    return { id, label, status: "pass", detail: `${fact.path} exists and is committed` };
+}
+/** Package-manager subcommands that are not a `package.json` script name. */
+const PACKAGE_MANAGER_BUILTINS = new Set([
+    "install",
+    "ci",
+    "add",
+    "remove",
+    "rm",
+    "dlx",
+    "exec",
+    "create",
+    "init",
+    "link",
+    "unlink",
+    "publish",
+    "update",
+    "outdated",
+    "list",
+    "ls",
+    "why",
+    "store",
+    "prune",
+    "audit",
+    "dedupe",
+    "pack",
+    "patch",
+    "rebuild",
+]);
+/**
+ * The `package.json` script name a gate command invokes, if it looks like a
+ * package-manager script invocation (`pnpm <script>`, `npm run <script>`,
+ * `yarn <script>`); undefined for anything else, including a package-manager
+ * builtin like `pnpm install`. Best-effort: a command this misses is simply not
+ * checked further, never reported as broken on a guess.
+ */
+export function scriptNameOf(command) {
+    const [head, ...rest] = command.trim().split(/\s+/);
+    const next = rest[0];
+    if (head === "pnpm" || head === "yarn") {
+        if (next === undefined || next.startsWith("-"))
+            return undefined;
+        if (next === "run")
+            return rest[1];
+        if (PACKAGE_MANAGER_BUILTINS.has(next))
+            return undefined;
+        return next;
+    }
+    if (head === "npm") {
+        if (next !== "run" && next !== "run-script")
+            return undefined;
+        return rest[1];
+    }
+    return undefined;
+}
+/** Gate commands that name a `package.json` script the project does not have. */
+export function unresolvedGateCommands(commands, scripts) {
+    if (scripts === undefined)
+        return [];
+    const unresolved = [];
+    for (const command of commands) {
+        const script = scriptNameOf(command);
+        if (script !== undefined && !(script in scripts))
+            unresolved.push(command);
+    }
+    return unresolved;
+}
+export function checkGate(commands, scripts) {
+    const id = "gate";
+    const label = "gate";
+    if (commands.length === 0) {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "[gate].commands is empty; nothing verifies an agent's changes",
+            fix: "add CI-mirroring commands to [gate].commands in ghostrail.toml",
+        };
+    }
+    const unresolved = unresolvedGateCommands(commands, scripts);
+    if (unresolved.length > 0) {
+        return {
+            id,
+            label,
+            status: "warn",
+            detail: `no matching package.json script for: ${unresolved.join(", ")}`,
+            fix: "add the missing script(s) to package.json, or fix the gate command",
+        };
+    }
+    return { id, label, status: "pass", detail: `${commands.length} gate command(s) configured` };
+}
+export function checkBackend(facts) {
+    const id = "backend";
+    const label = "backend";
+    if (facts.kind !== "container") {
+        return { id, label, status: "pass", detail: `${facts.kind} needs no image` };
+    }
+    if (facts.quick) {
+        return { id, label, status: "warn", detail: "skipped docker/image checks (--quick)" };
+    }
+    if (facts.dockerAvailable === false) {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "docker is not reachable",
+            fix: "start Docker; `docker version` should succeed",
+        };
+    }
+    if (facts.image === undefined) {
+        return {
+            id,
+            label,
+            status: "warn",
+            detail: `using the default ${DEFAULT_CONTAINER_IMAGE} image, which has no node, pnpm, git, gh, or claude, so a run will provision and then fail at the gate`,
+            fix: "set [backend].image, or build the shipped image with `ghostrail image build`",
+        };
+    }
+    if (facts.imagePresent === false) {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: `image ${facts.image} not found locally`,
+            fix: `ghostrail image build --tag ${facts.image}`,
+        };
+    }
+    return { id, label, status: "pass", detail: `image ${facts.image} present, docker reachable` };
+}
+export function checkClaudeProfile(facts) {
+    const id = "claude-profile";
+    const label = "claude profile";
+    if (!facts.present) {
+        return {
+            id,
+            label,
+            status: "pass",
+            detail: "no ghostrail Claude profile in use; runs use your normal ~/.claude",
+        };
+    }
+    const redirectNote = "runs redirect HOME (and pass --settings) at this profile, which carries no " +
+        ".credentials.json by design, so only ANTHROPIC_API_KEY / CLAUDE_CODE_OAUTH_TOKEN " +
+        "survive that redirect; an interactive login in your real home is invisible to the agent";
+    if (facts.missingPins.length > 0) {
+        return {
+            id,
+            label,
+            status: "warn",
+            detail: `${redirectNote}. Requested via --pin but not installed: ${facts.missingPins.join(", ")}`,
+            fix: `ghostrail claude-setup --pin ${facts.missingPins.join(" --pin ")} --write`,
+        };
+    }
+    return { id, label, status: "pass", detail: redirectNote };
+}
+/** Whether a raw env value is unset, present-but-blank, or a real value. Never returns the value. */
+export function classifyCredential(value) {
+    if (value === undefined)
+        return "unset";
+    return value.trim().length === 0 ? "blank" : "set";
+}
+export function checkClaudeAuthCredential(anthropicApiKey, oauthToken) {
+    const id = "credential:claude-auth";
+    const label = "credential (claude auth)";
+    const apiKey = classifyCredential(anthropicApiKey);
+    const oauth = classifyCredential(oauthToken);
+    if (apiKey === "blank") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "ANTHROPIC_API_KEY is set but empty",
+            fix: "unset ANTHROPIC_API_KEY or give it a real value",
+        };
+    }
+    if (oauth === "blank") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "CLAUDE_CODE_OAUTH_TOKEN is set but empty",
+            fix: "unset CLAUDE_CODE_OAUTH_TOKEN, or run `claude setup-token`",
+        };
+    }
+    if (apiKey === "unset" && oauth === "unset") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "neither ANTHROPIC_API_KEY nor CLAUDE_CODE_OAUTH_TOKEN is set",
+            fix: "run `claude setup-token`, or set ANTHROPIC_API_KEY",
+        };
+    }
+    if (apiKey === "set" && oauth === "set") {
+        return {
+            id,
+            label,
+            status: "warn",
+            detail: "ANTHROPIC_API_KEY is set alongside CLAUDE_CODE_OAUTH_TOKEN; the API key wins, so a stale key silently beats a good token",
+            fix: "unset ANTHROPIC_API_KEY to bill the Pro/Max subscription via the OAuth token",
+        };
+    }
+    return {
+        id,
+        label,
+        status: "pass",
+        detail: `using ${apiKey === "set" ? "ANTHROPIC_API_KEY" : "CLAUDE_CODE_OAUTH_TOKEN"}`,
+    };
+}
+export function checkLinearCredential(linearApiKey) {
+    const id = "credential:linear";
+    const label = "credential (linear)";
+    const shape = classifyCredential(linearApiKey);
+    if (shape === "unset") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "LINEAR_API_KEY is not set; required for every run",
+            fix: "ghostrail secrets-setup --write",
+        };
+    }
+    if (shape === "blank") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "LINEAR_API_KEY is set but empty",
+            fix: "unset LINEAR_API_KEY or give it a real value",
+        };
+    }
+    return { id, label, status: "pass", detail: "LINEAR_API_KEY is set" };
+}
+export function checkGithubCredential(ghToken, githubToken) {
+    const id = "credential:github";
+    const label = "credential (github)";
+    const gh = classifyCredential(ghToken);
+    const github = classifyCredential(githubToken);
+    if (gh === "blank") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "GH_TOKEN is set but empty",
+            fix: "unset GH_TOKEN or give it a real value",
+        };
+    }
+    if (github === "blank") {
+        return {
+            id,
+            label,
+            status: "fail",
+            detail: "GITHUB_TOKEN is set but empty",
+            fix: "unset GITHUB_TOKEN or give it a real value",
+        };
+    }
+    if (gh === "unset" && github === "unset") {
+        return {
+            id,
+            label,
+            status: "warn",
+            detail: "neither GH_TOKEN nor GITHUB_TOKEN is set; publishing a PR will fail",
+            fix: "ghostrail secrets-setup --write",
+        };
+    }
+    return {
+        id,
+        label,
+        status: "pass",
+        detail: `using ${gh === "set" ? "GH_TOKEN" : "GITHUB_TOKEN"}`,
+    };
+}
+export function checkClaudeProbe(result, backendKind) {
+    const id = "probe:claude-auth";
+    const label = "probe (claude auth)";
+    switch (result.kind) {
+        case "not-run":
+            return {
+                id,
+                label,
+                status: "warn",
+                detail: "not run: no claude credential is set",
+            };
+        case "skipped":
+            return {
+                id,
+                label,
+                status: "warn",
+                detail: "skipped (--quick); presence of a credential does not mean it authenticates",
+            };
+        case "ok":
+            return {
+                id,
+                label,
+                status: "pass",
+                detail: `claude -p answered inside the configured backend (${backendKind})`,
+            };
+        case "invalid-token":
+            return {
+                id,
+                label,
+                status: "fail",
+                detail: `claude -p failed inside the configured backend (${backendKind}): 401 Invalid bearer token`,
+                fix: "the token is expired or revoked; run `claude setup-token`",
+            };
+        case "error":
+            return {
+                id,
+                label,
+                status: "fail",
+                detail: `claude -p failed inside the configured backend (${backendKind}): ${result.message}`,
+            };
+    }
+}
+export function checkLinearProbe(result) {
+    const id = "probe:linear-auth";
+    const label = "probe (linear auth)";
+    switch (result.kind) {
+        case "not-run":
+            return { id, label, status: "warn", detail: "not run: LINEAR_API_KEY is not usable" };
+        case "skipped":
+            return { id, label, status: "warn", detail: "skipped (--quick)" };
+        case "ok":
+            return { id, label, status: "pass", detail: "LINEAR_API_KEY authenticated" };
+        case "unauthorized":
+            return {
+                id,
+                label,
+                status: "fail",
+                detail: "LINEAR_API_KEY was rejected (unauthorized)",
+                fix: "generate a new key at Linear Settings > Security & Access",
+            };
+        case "error":
+            return {
+                id,
+                label,
+                status: "fail",
+                detail: `LINEAR_API_KEY probe failed: ${result.message}`,
+            };
+    }
+}
+const HISTORY_SAMPLE = 5;
+export function checkHistory(rows) {
+    const id = "history";
+    const label = "recent history";
+    if (rows.length === 0) {
+        return {
+            id,
+            label,
+            status: "pass",
+            detail: "no run history yet (the store is empty or absent, not evidence of health)",
+        };
+    }
+    const sample = rows.slice(0, HISTORY_SAMPLE);
+    const states = sample.map((row) => row.state ?? "unknown").join(", ");
+    const mostRecent = sample[0];
+    if (mostRecent?.state === "failed") {
+        const error = mostRecent.error ?? "no error was recorded for it";
+        return {
+            id,
+            label,
+            status: "warn",
+            detail: `recent runs: ${states}. The most recent run failed: ${error}`,
+        };
+    }
+    return { id, label, status: "pass", detail: `recent runs: ${states}` };
+}
+//# sourceMappingURL=checks.js.map